home

SothinkProcess.exe

{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Zhang Qingming

Publisher:
Sothink Software.  (signed by Zhang Qingming)

Product:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Description:
Sothink Media Toolkit

Version:
1, 0, 0, 1

MD5:
f0d1fabdba7b96a4b4ecc07563002c32

SHA-1:
f8f221ed07394208bfde5bc35cf8d2dfbaa1f561

SHA-256:
addaa8b2a886316a04914b731f9ca8272bd555a454be8440af756758510ee1ee

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:46:03 PM UTC  (today)

File size:
7.1 MB (7,400,504 bytes)

Product version:
1, 0, 0, 1

Copyright:
{B166CCA7-3C5E-4e11-9D4F-582FB510777A}CompanyName#####################################################################################################

Original file name:
SothinkProcess.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\sothink video converter free version\sothinkprocess.exe

Digital Signature
Signed by:
Zhang Qingming

Authority:
WoSign CA Limited

Valid from:
6/19/2015 1:49:57 PM

Valid to:
6/19/2016 1:49:57 PM

Subject:
CN=Zhang Qingming, L=Xin'an, S=Henan, C=CN

Issuer:
CN=WoSign Class 2 Code Signing CA, O=WoSign CA Limited, C=CN

Serial number:
41F4CEFBF7FCBD8739746DD2C696E362

File PE Metadata
Compilation timestamp:
12/16/2015 6:29:44 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
98304:eIt/n9Pt7HdKnguQGjzO76dZO3D3oAKUSX9P4dlE7Qks85G8r0WEWPSKz8xMwwD:eu9Pt79wgNZ7Xzooe9J7FUUEWPSKlwwD

Entry address:
0x1000

Entry point:
68, 01, A0, 47, 01, E8, 01, 00, 00, 00, C3, C3, E2, 8D, 6B, 8E, 87, 6B, A8, 86, 7C, 98, A0, 9E, 42, AA, C3, 97, 9B, 63, B1, DD, 5D, 86, A6, DD, 66, 48, CB, 81, 1C, 5E, 08, 35, DF, C1, DF, 7A, 35, ED, 59, 9E, 07, E6, 78, F3, 01, 33, 75, 90, 32, B7, 5A, E7, A1, E0, D3, ED, 71, 98, 7F, F5, 68, DB, 51, F3, CE, E7, 87, F1, 59, 8C, 85, 7B, 68, 8D, 32, 00, 44, 72, 51, 87, B9, B0, 43, 72, 18, 71, 7A, FD, 78, 8E, 0D, E5, 71, B2, 0C, 9A, E4, 70, 3F, B8, 0F, D6, 94, 79, 88, DB, EA, 5A, 8A, 8A, 16, 34, DD, F1, 6C, 67...
 
[+]

Entropy:
7.9121

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
7 MB (7,325,696 bytes)

Scan SothinkProcess.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.